Authorisation required to display Workflow Tasks in PFCG

[Former Member]

Hi Gurus,

When using PFCG I have a strange difference between a user with SAP_ALL authorisatios and a user without SAP_ALL.

Using the SAP_ALL user, when I display a role it shows the Tasks under the Workflow tab.

Using the user without SAP_ALL, it still displays the Workflow tab but the Tasks are not displayed.

I have come to the conclusion that this must be authorisation related, so does anyone know what authorisations allow users to display the Workflow Tasks in PFCG?

All help greatly appreciated.

Thanks,

Matt

[Former Member]

Matt,

One suggestion, you can place your query in Netweaver Security forum.

Regards,

Sujit.

[JPReyes]

Moved to Security forum

[sivakumar_kilari3]

Which Tcodes. you are using for work flow?

Regards

Siva

[Former Member]

Hi Siva,

I am not actually using Workflow myself, but I am responsible for making sure that the users have the correct entries in their Workflow entries for them to be able to use it.

I am happy to look after them, but in order to do so I am having to use a user with SAP_ALL rights to be able to see the entries in PFCG.

What I am trying to find out is which authorisations I need to add to an alternate role in order to avoid using SAP_ALL.

Thanks,

Matt

[sivakumar_kilari3]

> What I am trying to find out is which authorisations I need to add to an alternate role in order to avoid using SAP_ALL.

The following are basic transactions which are being used in the SAP Workflow.

Tcodes - Description

OOAW - Evaluation paths

PFAC_CHG - Change roles

PFAC_DEL - Delete roles

PFAC_DIS - Display roles

PFAC_INS - Create roles

PFOM - Maintain assignment to SAP organizational objects

PFOS - Display assignment to SAP organizational objects

PFSO - Organizational environment of a user

PFTC_CHG - Change tasks

PFTC_COP - Copy tasks

PFTC_DEL - Delete tasks

PFTC_DIS - Display tasks

PFTC_INS - Create tasks

PPOCW - Create organizational plan

PPOMW - Maintain organizational plan

PPOSW - Display organizational plan

SWDA - Workflow Builder (Calls the Workflow Builder in alphanumeric mode)

SWDD - Workflow Builder

SWDS - Workflow Builder (Selection)

SWDD_CONFIG - Workflow configuration

SBWP - The Business Workplace

SWDC_DEFINITION - Workflow Builder administration data

SWDC_RUNTIME - Workflow runtime administration data

SWNCONFIG - Extended notifications for business workflow

SWDM - Business Workflow Explorer

SWEINST - Evaluation and maintenance of instance linkages

SWEINSTVC - Evaluation and maintenance of instance linkages

SWE2 - Evaluation and maintenance of type linkages

SWE3 - Evaluation and maintenance of instance linkages

SWE4 - Switch event trace on/off

SWEL - Display event trace

RSWELOGD - Delete event trace

You can create separate role and assign these codes

Regards

Siva

[sivakumar_kilari3]

> What I am trying to find out is which authorisations I need to add to an alternate role in order to avoid using SAP_ALL.

The following are basic transactions which are being used in the SAP Workflow.

Tcodes - Description

OOAW - Evaluation paths

PFAC_CHG - Change roles

PFAC_DEL - Delete roles

PFAC_DIS - Display roles

PFAC_INS - Create roles

PFOM - Maintain assignment to SAP organizational objects

PFOS - Display assignment to SAP organizational objects

PFSO - Organizational environment of a user

PFTC_CHG - Change tasks

PFTC_COP - Copy tasks

PFTC_DEL - Delete tasks

PFTC_DIS - Display tasks

PFTC_INS - Create tasks

PPOCW - Create organizational plan

PPOMW - Maintain organizational plan

PPOSW - Display organizational plan

SWDA - Workflow Builder (Calls the Workflow Builder in alphanumeric mode)

SWDD - Workflow Builder

SWDS - Workflow Builder (Selection)

SWDD_CONFIG - Workflow configuration

SBWP - The Business Workplace

SWDC_DEFINITION - Workflow Builder administration data

SWDC_RUNTIME - Workflow runtime administration data

SWNCONFIG - Extended notifications for business workflow

SWDM - Business Workflow Explorer

SWEINST - Evaluation and maintenance of instance linkages

SWEINSTVC - Evaluation and maintenance of instance linkages

SWE2 - Evaluation and maintenance of type linkages

SWE3 - Evaluation and maintenance of instance linkages

SWE4 - Switch event trace on/off

SWEL - Display event trace

RSWELOGD - Delete event trace

You can create separate role and assign these codes

Regards

Siva

[Bernhard_SAP]

Hi Matt,

try authorizations for object PLOG....

navigating to the Workflow tab show following checks:

PPFCODE=DISP;PLVAR=01;OTYPE=AG;INFOTYP=1001;SUBTYP=A007;ISTAT= ;

PPFCODE=DISP;PLVAR=01;OTYPE=AG;INFOTYP=1001;SUBTYP=B007;ISTAT= ;

PPFCODE=DISP;PLVAR=01;OTYPE=TG;INFOTYP=1001;SUBTYP=B007;ISTAT= ;

PPFCODE=DISP;PLVAR=01;OTYPE=AG;INFOTYP=1001;SUBTYP=A007;ISTAT=1;

PPFCODE=DISP;PLVAR=01;OTYPE=T;INFOTYP= ;SUBTYP= ;ISTAT= ;

b.rgds, Bernhard

Edited by: Bernhard Hochreiter on Mar 14, 2011 1:31 PM